Nomad bridge drained of ~$190M in a copy-paste free-for-all

On August 1, 2022, a botched routine upgrade to Nomad's Replica contract left messages with bogus proofs accepted as valid, making the exploit so trivial that anyone could swap in their own address and drain funds. The result was a "decentralized robbery" in which hundreds of wallets copy-pasted the same transaction, hauling away roughly $190 million in hours. It remains the textbook example of why cross-chain bridges are crypto's favorite honeypot.